marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 11:49:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(model): shipped joins the evidence vector as a within-tier weight; v5 baseline

Browse Source 
v5 (parameter-fed carried confirmed by the exact flow): pmpro 69, wpstatistics 172, mwwpform 68,
vampi 16. Reading the recorded head of each order: every region ahead of a CVE is in its tier on a tied
or higher score, and 10 of the 67 ahead of MW WP Form's are test-mail.php. The build's own word on what
is product was on the region and not in the vector; it is now, at -2.0 for an unshipped file. Orders
only, never promotes.

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG
This commit is contained in:
Marius Ciepluch
2026-09-11 13:45:00 +02:00
co-authored by Claude Fable 5.1
parent 983eda5886
commit 2de873274f
4 changed files with 3493 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_model_evidence.py
+12
View File
@@ -175,3 +175,15 @@ def test_carried_provenance_promotes_only_when_source_fed() -> None:
assert weak is not None and weak.tier == TIER_OPEN and weak.carried is False and weak.carried_weak
assert none is not None and none.tier == TIER_OPEN and not none.carried_weak
assert weak.score - none.score == WEIGHTS["carried_weak"]
def test_an_unshipped_file_orders_after_a_shipped_one_in_the_same_tier() -> None:
"""`shipped` is the build's own word on what is product; a test fixture with the same sink and source
is not where the bug ships. Orders only: the tier is unchanged."""
from openultrasast.model.evidence import WEIGHTS, Evidence, SinkEvidence
sink = SinkEvidence(code="q(1)", line=1, method="m", arity=1, arg0_literal=False, cleansed_on_call=False)
product = Evidence(sinks=(sink,), source_local=True, shipped=True)
fixture = Evidence(sinks=(sink,), source_local=True, shipped=False)
assert product.tier == fixture.tier
assert product.score - fixture.score == -WEIGHTS["unshipped"]